134
BMC Settings
7.10.1.1
User Privileges
User privileges includes 3 types: IMPI user privilege, WEB GUI user privilege, and Smash-
Lite CLI user privilege.
IPMI User Privileges
BMC has two ways to receive IPMI CMD, out-band and in-band.
•
Out-band mode means sending IPMI CMD to BMC by LAN, BMC will authenticate the
username and password.
•
In-band mode means sending IPMI CMD in HOST OS. In this mode, IPMI CMD does
not need to authenticate the username and password, because users will get the
highest privilege when accessing the HOST OS. So if users forgets their passwords or
passwords expire, they can send IPMI CMD under HOST OS to disable the password
security rule.
Please refer to IPMI 2.0 Spec, Appendix G - CMD assignments. Common privileges are as
shown below:
User privilege
Supported operation
Administrator
Read/Write
Operator
Read Only
User
Read Only
No Access
Non
WEB GUI user privileges
Only IPMI/WEB/SSH unified users support the WEB GUI.
Menu
Subdirectory
User
Operator
Administrator
Information
System Information
Read Only
Read Only
Read/Write
BIOS Setup Options
Read Only
Read Only
Read/Write
FRU Information
Read Only
Read Only
Read/Write
History Records
Read Only
Read Only
Read/Write
Remote Control Console Redirection
NA
NA
Read/Write
Locate Server
NA
NA
Read/Write
Remote Session
Read Only
Read Only
Read/Write
Virtual Media
Read Only
Read Only
Read/Write
Mouse Mode
Read Only
Read Only
Read/Write
Power and Fan Server Power Control
Read Only
Read Only
Read/Write
Fan Speed Control
Read Only
Read Only
Read/Write
BMC Settings
BMC Network
NA
Read Only
Read/Write
Service
Read Only
Read Only
Read/Write
NTP
Read Only
Read Only
Read/Write
SMTP
NA
NA
Read/Write
Alerts
NA
Read Only
Read/Write